$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft File: HsyXilPvK-iOXyatm4q4g3PRl6Y.mft (raw, json) Hash identifier: GHXHObgCl/DFfiVO6NdecdS++dgtkhNUsOCimE1KZNA= Subject key identifier: 27:7F:F0:03:35:48:5B:18:03:29:61:57:AB:D1:B6:2A:23:4B:81:6A Authority key identifier: 1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6 Certificate issuer: /CN=A9149F3E/serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6 Certificate serial: 354D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft Manifest number: 354D Signing time: Mon 20 Apr 2026 14:22:01 +0000 Manifest this update: Mon 20 Apr 2026 14:22:00 +0000 Manifest next update: Mon 27 Apr 2026 14:22:00 +0000 Files and hashes: 1: HsyXilPvK-iOXyatm4q4g3PRl6Y.crl (hash: 9EQGm5sfFP6A5AKKSTlguqHrOz0rY4U58d37psgkb48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 14:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13645 (0x354d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6 Validity Not Before: Apr 20 14:22:00 2026 GMT Not After : Apr 27 14:22:00 2026 GMT Subject: CN=69e63688-44c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f5:f3:e5:73:8f:b8:ce:5b:c0:59:30:60:14: 31:8c:6e:a5:a2:91:59:ec:82:a7:38:93:10:a6:c5: fb:6d:e7:98:5a:5d:19:1f:52:e3:01:a7:f2:f2:15: 7e:75:80:84:0b:e8:86:12:c9:b7:fc:2f:d5:f9:cf: a0:e3:3a:21:ad:6f:ad:15:01:8a:3b:c6:9a:1a:69: 53:e9:2d:22:05:34:16:83:c3:69:f1:7a:89:48:db: 29:91:3e:16:9a:d4:7f:1c:05:5e:95:9b:bd:00:9b: 0f:b5:e9:09:1b:f2:0b:d5:5b:e5:02:e1:05:3d:e4: 2e:72:fe:8a:da:ad:74:af:50:69:b0:c8:56:1e:9a: dd:2f:71:7e:10:11:cf:ae:24:5b:f9:e5:bf:1c:c0: 88:88:19:34:b5:2b:12:5c:35:b6:ca:95:d5:b3:18: c8:cc:f8:81:30:31:72:f2:63:20:8f:fa:73:47:39: 8d:71:77:ce:8c:6d:e7:10:ad:65:83:df:43:94:dc: 22:dd:27:37:de:ef:ad:bc:15:17:be:24:f2:24:a4: b9:1e:c3:b3:36:81:7c:a8:d6:4b:30:b9:e5:23:79: bf:87:e0:cf:1b:9a:b9:a2:c1:ec:67:50:93:ec:ef: f8:13:a5:79:5c:9b:ce:c6:31:c2:22:35:4c:c2:a2: 4c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7F:F0:03:35:48:5B:18:03:29:61:57:AB:D1:B6:2A:23:4B:81:6A X509v3 Authority Key Identifier: keyid:1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:07:89:08:f5:2a:1f:50:a7:98:e1:00:a8:10:2d:5d:cd:43: ed:52:de:0b:ec:a9:9c:22:ef:81:d9:21:e9:0f:a9:d9:da:02: 46:0d:79:b9:4f:44:4c:0b:6b:47:40:97:35:c9:b1:f0:ed:be: 97:46:83:77:c0:3f:e2:ec:0a:02:37:48:4b:1e:fb:28:6d:83: 9f:a5:68:bb:6a:c0:61:d3:20:bc:4b:95:f0:3e:e2:7c:fe:44: 43:91:69:fa:b9:70:1f:17:04:fa:f0:26:fc:bb:ad:f1:62:92: 26:33:55:6b:bd:34:c6:b0:2e:ca:37:39:47:a7:d9:78:01:01: b3:e8:ad:7b:cd:a9:bd:27:1a:23:ed:df:0c:83:ea:c3:8b:ff: a9:16:7e:b8:0d:ac:fa:07:76:5d:12:f2:ee:b1:11:af:74:39: c1:83:49:63:7e:5c:2b:3d:8d:d4:59:81:75:35:7c:67:ff:be: c9:f9:16:22:91:75:68:ca:e0:89:1a:35:57:b8:cc:7f:ce:cc: 1d:28:4b:32:db:79:1b:5c:dc:22:60:8b:dd:2c:3e:c6:7a:b6: a7:2b:a7:2f:cc:68:52:bc:38:27:7d:17:28:ee:d9:49:1e:b8: 06:e3:b8:8b:ee:b0:2d:a8:9f:d0:53:e6:84:f1:66:9b:ed:fd: 72:8f:f4:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKDFFQ0M5NzhBNTNFRjJCRTg4RTVGMjZBRDlCOEFCODgz NzNEMTk3QTYwHhcNMjYwNDIwMTQyMjAwWhcNMjYwNDI3MTQyMjAwWjAYMRYwFAYD VQQDEw02OWU2MzY4OC00NGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvXz5XOPuM5bwFkwYBQxjG6lopFZ7IKnOJMQpsX7beeYWl0ZH1LjAafy8hV+ dYCEC+iGEsm3/C/V+c+g4zohrW+tFQGKO8aaGmlT6S0iBTQWg8Np8XqJSNspkT4W mtR/HAVelZu9AJsPtekJG/IL1VvlAuEFPeQucv6K2q10r1BpsMhWHprdL3F+EBHP riRb+eW/HMCIiBk0tSsSXDW2ypXVsxjIzPiBMDFy8mMgj/pzRzmNcXfOjG3nEK1l g99DlNwi3Sc33u+tvBUXviTyJKS5HsOzNoF8qNZLMLnlI3m/h+DPG5q5osHsZ1CT 7O/4E6V5XJvOxjHCIjVMwqJMOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCd/8AM1 SFsYAylhV6vRtiojS4FqMB8GA1UdIwQYMBaAFB7Ml4pT7yvojl8mrZuKuINz0Zem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9CRkVCMDAwODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9Ic3lYaWxQdkstaU9YeWF0bTRxNGczUFJs NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0hzeVhpbFB2Sy1pT1h5YXRtNHE0ZzNQUmw2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS9CRkVCMDAwODFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9Ic3lYaWxQdkst aU9YeWF0bTRxNGczUFJsNlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfweJCPUqH1CnmOEAqBAtXc1D7VLeC+ypnCLvgdkh6Q+p2doCRg15uU9ETAtr R0CXNcmx8O2+l0aDd8A/4uwKAjdISx77KG2Dn6Vou2rAYdMgvEuV8D7ifP5EQ5Fp +rlwHxcE+vAm/Lut8WKSJjNVa700xrAuyjc5R6fZeAEBs+ite82pvScaI+3fDIPq w4v/qRZ+uA2s+gd2XRLy7rERr3Q5wYNJY35cKz2N1FmBdTV8Z/++yfkWIpF1aMrg iRo1V7jMf87MHShLMtt5G1zcImCL3Sw+xnq2pyunL8xoUrw4J30XKO7ZSR64BuO4 i+6wLaif0FPmhPFmm+39co/0ag== -----END CERTIFICATE-----Generated at Wed Apr 22 00:09:16 2026 by rpki-client